IBM Support

PI63883: WMQ Z/OS V800:SET CHLAUTH CLNTUSER PARAMETER IS 12 CHARACTERS WHICH CAUSES CSQY337E

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Customer is running MQ V8  using ACF2 and wants to map
    CLNTUSER(xxx) to MCAUSER(USER1) from ADDRESS
    ('n.n.*.*').    All the CHLAUTH settings below resulted in the
    following error:
    ACF00076 LOGONID xxx NOT FOUND
    
    These are the CHLAUTH settings in customer environment:
     1) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP)
    USERSRC(MAP) CLNTUSER(xxx) MCAUSER(USER1) ADDRESS('n.n.*.*')
    ACTION(REPLACE)
    
    2) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP)
    CLNTUSER(xxxx) USERSRC(MAP)
    MCAUSER(USER1) ADDRESS('n.n.*.*') ACTION(REPLACE)
    
    3) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP) +
    CLNTUSER(xxx) MCAUSER(USER1)
    
    Customer complained the issue "ACF00076 LOGONID xxxx NOT FOUND"
    when doing the translation from CLNTUSER to MCAUSER with that
    the CHLAUTH is TYPE(USERMAP)
    If the user ID is lower case, quotation marks must enclose
    it, for exampe:
    
    SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP) USERSRC(MAP)
    CLNTUSER('xxx')  MCAUSER(USER1) ADDRESS('n.n.*'.*)
    ACTION(REPLACE)
    
    However, CSQY337E "+CSQ1 CSQMSCA CLNTUSER value length not
    allowed - restricted functionality" is shown .
    
    The CHIN is passing the long userid which may be up to 64
    characters, when checking CHLAUTH records, but the limit on the
    SET CHLAUTH CLNTUSER parameter is 12 characters which causes
    the problem.
    
    Note that it looks  as though this problem will not occur at MQ
    V8 with NEWFUNC (CLNTUSER may be greater than 12 characters in
    this case).
    

Local fix

  • n/a.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 *
    *                 Release 0 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: "CSQY337E +MQNS CSQMSCA CLNTUSER value  *
    *                      length not allowed - restricted         *
    *                      functionality" is issued when issuing   *
    *                      SET CHLAUTH to define a USERMAP rule to *
    *                      map a client user that is longer than   *
    *                      12 characters (for example, the user    *
    *                      associated with a client connection     *
    *                      from the Windows platform, where the    *
    *                      user can be up to 64 characters long),  *
    *                      and the queue manager is not running    *
    *                      with OPMODE NEWFUNC,800.                *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    On z/OS, the maximum length of the CLNTUSER field when adding a
    channel authentication (CHLAUTH) record was 12 characters.
    However incoming clients were matched against their long user
    ID, not the short user ID.
    This meant it was not possible to correctly map clients which
    reported usernames of longer than 12 characters as it was not
    possible to configure this within the queue manager on z/OS.
    

Problem conclusion

  • The maximum length for the CLNTUSER field has been increased on
    z/OS to 64 characters. This is the same length Windows uses,
    and is the maximum length of the long user ID field of an MQMD.
    
    This makes it possible to configure the queue manager such that
    clients reporting user names of longer than 12 characters will
    be correctly mapped.
    
    When running in NEWFUNC,800, the maximum length for the CLNTUSER
    field is unchanged at 1024 characters.
    000Y
    CSQMDCA
    CSQMSCA
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI63883

  • Reported component name

    WMQ Z/OS 8

  • Reported component ID

    5655W9700

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-06-09

  • Closed date

    2016-06-17

  • Last modified date

    2016-08-02

  • APAR is sysrouted FROM one or more of the following:

    PI56514

  • APAR is sysrouted TO one or more of the following:

    UI38765

Modules/Macros

  • CSQMDCA  CSQMSCA
    

Fix information

  • Fixed component name

    WMQ Z/OS 8

  • Fixed component ID

    5655W9700

Applicable component levels

  • R000 PSY UI38765

       UP16/07/06 P F607

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
02 August 2016